[strongSwan] Usage questions: DPD and auto=

Tom Rymes trymes at rymes.com
Mon Mar 9 13:21:08 CET 2015


All,

I have two questions:

1.) Since IKEv2 does not use DPD, should one omit the dpdaction 
directives from ipsec.conf for a connection using IKEv2? Is there any 
harm/unintended consequences if they are left in, and are there 
alternate directives that one should use instead?

2.) Is it appropriate to use auto-route on both ends of a tunnel, or 
should only one end be set up that way to avoid issues when both ends 
try to bring the tunnel up at the same time?

Thank you,

Tom


More information about the Users mailing list